CodeQL library for C/C++
codeql/cpp-all 2.1.1-dev (changelog, source)
Search

Predicate localTaintStep

Holds if taint propagates from nodeFrom to nodeTo in exactly one local (intra-procedural) step. This relation is only used for local taint flow (for example TaintTracking::localTaint(source, sink)) so it may contain special cases that should only apply to local taint flow.

Import path

import semmle.code.cpp.ir.dataflow.internal.TaintTrackingUtil
predicate localTaintStep(Node nodeFrom, Node nodeTo)